INNER CODE UNIT · Go

ResolveClientTLS

metacontroller/metacontroller · pkg/hooks/auth.go:124

func ResolveClientTLS(ctx context.Context, k8sClient client.Client, spec *v1alpha1.ClientTLS) (*tls.Certificate, error) {
	if spec == nil {
		return nil, nil
	}

	secret := &corev1.Secret{}
	if err := k8sClient.Get(ctx, types.NamespacedName{
		Name:      spec.SecretRef.Name,
		Namespace: spec.SecretRef.Namespace,
	}, secret); err != nil {
		return nil, fmt.Errorf("can't get clientTLS secret %s/%s: %w",
			spec.SecretRef.Namespace, spec.SecretRef.Name, err)
	}

	certKey := spec.CertKey
	if certKey == "" {
		certKey = defaultCertKey
	}

View source record →